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METHOD AND SYSTEM FOR GATHERING AND DISSEMINATING QUALITY 
PERFORMANCE AND AUDIT ACTIVITY DATA IN AN EXTENDED 
ENTERPRISE ENVIRONMENT 

BACKGROUND OF THE INVENTION 
5 This invention relates generally to a computer-based 

method and system for supply chain management, and more 
particularly, this invention relates to a method and system 
for gathering and disseminating quality performance and 
audit activity data in an extended environment. 

10 With the advent of the Internet and related 

technologies, complex networking systems have evolved that 
enable distant trading partners operating disparate computer 
systems to interact with one another. The Internet provides 
a ubiquitous message routing architecture that supports 

15 reliable inter-business connectivity around the world, based 

on common communication protocols and common standards for 
system interoperability. Further, the Internet and related 
intranet and extranet technologies offer a relatively low 
cost of entry, making them practical for use by large and 

20 small businesses alike. Web-based security issues have been 

minimized through the use of intranets that connect a 
business' internal processes to the applications and data 
they need and extranets that connect external processes to 
the applications and data they need. Firewalls or security 

25 devices are added to protect against unauthorized access to 

the internal network and to isolate unauthorized Internet 
access from the extranet. With this new technology in 
place, existing trading barriers between trading partners 
can be removed, allowing for a synchronized flow of 
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information . 

A recent trend in electronics manufacturing involves 
contracting out some or all of the manufacturing of a 
company's products to third party manufacturers which then 
5 build these products according to specification. This 

arrangement, known as outsourcing, results where the 
original manufacturer (called an Original Equipment 
Manufacturer, or OEM) buys assemblies in bulk from third- 
party contract manufacturers and then customizes them for a 

10 particular application. It then markets and sells the 

customized equipment under its own name. By outsourcing the 
manufacturing and assembly of these goods, established OEMs 
are able to focus on other business areas such as new 
product development and customer relationship management. 

15 Additionally, as product designs and components are becoming 

increasingly complex and frequently updated, a contract 
manufacturer with specialized skills may be better equipped 
to accommodate the changing technology. By outsourcing to 
meet peak demands, an OEM may be able to avoid having to 

20 build new facilities and/or hire new people. 

An OEM who is outsourcing the manufacturing of its 
products needs to be able to collaborate with its contract 
manufacturers and suppliers before, during, and after the 
manufacturing cycle in order to achieve maximum efficiency 

25 of the production process. One area of collaboration is 

supplier auditing and reporting. Technology shifts are 
causing new technical suppliers to rise in an ever 
increasing worldwide space. With this rise in suppliers, 
comes the need for new quality control measures including 
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auditing processes. Before integrating a supplier 
technology into an OEM's product, a supplier is often 
subjected to a rigorous audit to ensure that correct 
technical processes are followed and to ensure technical 
5 capability. Supplier audit management must be able to 

handle the audit process where the OEM has offices located 
around the world and buys from suppliers equally spread out. 
Traditional methods of qualifying suppliers and performing 
auditing procedures often result in redundant or unnecessary 

10 audits where inefficient, incomplete, or outdated records 

provide incorrect information. This is compounded by the 
fact that multiple procurement divisions of an OEM may not 
always know what other divisions are doing due to inadequate 
communications, employee turnover, and/or geographic 

15 separation. Further, old auditing methods that involved 

tracking down a particular auditor who possessed the 
requisite skills necessary to perform the audit was tedious 
and time consuming and often involved scheduling the auditor 
to travel excessive distances to the audit sites. Finally, 

2 0 old audit methods provided inconsistent results where audit 

reports took on different formats depending upon the 
division requesting the audit, resulting in non- standardized 
audit reports and unsatisfactory results. The present 
invention seeks to eliminate or reduce the above 

25 inefficiencies by providing a centralized storage system and 

process for creating, editing and storing auditing 
schedules, reports, and reference materials via a 
collaborative, web-enabled workgroup application. 
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SUMMARY OF THE INVENTION 

An exemplary einbodiment of the invention relates to a 
computer-based method and system for supply chain 
management, and more particularly, this invention relates to 
5 a method and system for gathering and disseminating quality 

performance and audit activity in an extended environment. 
The system includes a manufacturing enterprise system 
comprising a host system operating a web server, an 
applications server, and a database manager; a data storage 

10 device in communication with the host system, and at least 

one terminal for accessing the host system. The 
manufacturing enterprise system runs on a network that is 
coupled to the Internet and is accessible to an outside 
enterprise or trading partner identified with having proper 

15 access permissions. The applications server executes a set 
of programs for managing the manufacturing enterprise 
system, including the quality information network 
application of the present invention. Audit scheduling 
information, reference inquiries, and reporting data are 

2 0 inputted into the manufacturing enterprise system via the 

quality information network application where analysis, 
editing, and other functions are performed on the inputs. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Referring now to the drawings wherein like elements are 
25 numbered alike in the several FIGURES: 

FIG. 1 is a block diagram of a portion of the system 
that includes a plurality of workstations and servers on 
which the quality information network application is 
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implemented; 

FIG. 2 illustrates an exemplary main menu screen for 
the quality information network application; 

FIG. 3 illustrates an exemplary audit schedule menu and 
5 product category submenu screen for the quality information 

network application; 

FIG. 4 illustrates an exemplary audit schedule form 
screen for the quality information network application; and 
FIG. 5 is a flowchart describing the quality 
10 information network audit process. 



DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

The quality information network application is a 
collaborative tool used to facilitate the supplier auditing 

15 and reporting processes in an extended enterprise 

environment. It provides a centralized storage system in 
which audit schedules, reports and miscellaneous documents 
can be created and viewed in a collaborative manner by 
various users inside and outside of an organization on a 

20 tiered-access basis. It allows outsiders of the 

organization to submit comments and view a limited portion 
of information in the quality information network databases 
via a secure network connection. System administrators for 
the organization establish and maintain the access 

25 permissions and set parameters for users of the quality 

information network tool in keeping with the objectives of 
the organization. 

In an exemplary embodiment, the quality information 
application is implemented through a networked system such 
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as that shown in FIG. 1. Although not necessary to realize 
the advantages of the present invention, system 10 0 may be 
part of a wide area network in which different geographical 
locations are interconnected, either by high-speed data 
5 lines or by radio links, interconnecting hundreds of 

workstations at widely disparate locations. In the 
simplified diagram of FIG. 1, system 100 includes an 
organization 102 comprising a web server 104, an 
applications server 106, and a database server 108 that are 

10 located on a host system 110 and connected through a network 

112 to workstations 114. The term "organization'' refers to 
the system implementing the quality information network 
application. Network 112 may comprise a LAN, a WAN, or 
other network configuration known in the art. Further, 

15 network 112 may include wireless connections, radio-based 

communications, telephony-based communications, and other 
network-based communications. For purposes of illustration, 
however, network 112 is a LAN. A firewall 13 0 limits access 
to organization 102 to those users outside of organization 

20 102 who possess proper access permissions. Firewall 130 may 

comprise a gateway router, proxy server or a combination of 
similar hardware/software devices readily known by those 
skilled in the art. 

Host system 110 is running suitable web server software 

2 5 designed to accommodate various forms of communications and 

which allows information in data storage device 118 to be 
published on a web site. For purposes of illustration, host 
system 110 is running Lotus Domino (TM) as its server 
software. Applications server 106 executes the quality 
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information network tool, among other applications utilized 
by organization 102. Applications server 106 is also 
running a groupware application such as Lotus Notes (TM) 
which allows remote users to access information through its 

5 replication capabilities, provides e-mail services, and 

supports a secure extranet architecture. 

Data storage device 118 resides within intranet 112 and 
may comprise any form of mass storage device configured to 
read and write database type data maintained in a file store 

0 (e.g., a magnetic disk data storage device). Data storage 

device 118 is logically addressable as a consolidated data 
source across a distributed environment such as network 
system 100. The implementation of local and wide-area 
database management systems to achieve the functionality of 

5 data storage device 118 will be readily understood by those 

skilled in the art. Information stored in data storage 
device 118 is retrieved and manipulated via database server 
108. 

Data storage device 118 provides a repository for 
D databases including a reference database 122, an audit 

schedule database 124, an audit reports database 12 6, a 
supplier qualiy performance database 128, an executive 
summary reports database 12 9, and any other information 
desired by organization 102 for use by the quality 
> information network tool. These features are further 

described herein. 

System 150 comprises a web server 152 that connects 
workstations 154 to an intranet 156 and to the Internet. 
Firewall 158 provides security and protection against 
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unauthorized access to internal network information from 
outside sources. Each of workstations 154 may access web 
server 152 via internal web browsers (not shown) located on 
workstations 154. A data storage device 160 is coupled to 
server 152. Selected data fields and data from audit 
reports database 126 are replicated to database 120 and are 
accessible to system 150 via extranet 140. System 150 is 
typically an existing supplier or trading partner of 
organization 102. The terms ^supplier' or 'contract 
manufacturer' and 'trading partner' are used interchangeably 
throughout this description. Remote workstation 170 is 
coupled to organization 102 via a web browser (not shown) 
and modem (not shown) for communicating with organization 
102 . 

^5 A variety of user types may utilize the quality 

information network tool. These user types help define the 
nature and extent of access to data provided by organization 
102. For purposes of illustration, four user types are 
described herein; however, an organization implementing the 

2 0 quality information network tool may define its own user 

types . 

Divisional Users. Divisional users are typically 
engineers and developers of organization 102. Divisions of 
organization 102 are classified or sorted according to the 
25 product being manufactured. For example, one division may 

be dedicated to manufacturing/assembling personal computers. 
A second division might be responsible for the production of 
mainframe computers. A third division might involve storage 
devices. Divisional users may create, update, and transfer 
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documents in data storage device 118 to other authorized 
users, but are limited to modifying only those documents 
relating to their division. A divisional user may be a 
requester of an audit. 

Suppliers/Contract Manufacturers, These users are 
external to the organization but have a need to access 
certain information contained in data storage device 118. 
These users are restricted to viewing through the Internet 
or extranet 14 0 a limited segment of information in data 
storage device 118 to ensure the overall confidentiality of 
the documents contained therein. Trading partners at system 
150 can input comments or attachments through data fields 
replicated from database 126 and submit them via extranet 
140 to the data storage device 118. 

Executive Readers. These users are typically high 
level executives of organization 102 with Wiew only' access 
to executive summary database 129. Access is restricted to 
general information and executive summary data relating to 
audit reports and documents and is used for informational 
2 0 purposes. 

Administrators. Administrators of organization 102 
determine the access requirements for internal and external 
users of the quality information tool and maintain access 
control lists. They also provide user support as necessary. 
> Administrators may further be categorized by division. 

Access control lists store the names of authorized 
users of the databases stored in data storage device 118 and 
each user is assigned an access level by an administrator of 
organization 102. Only administrators can add, modify or 
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delete authorized users in the access control list. 

A user accesses the quality information network 
application via a main menu screen as shown in FIG. 2. The 
options available to the user on main menu screen 200 

5 include '^Quality Specifications and References" 2 02, "Audit 

Schedules" 2 04, Audit Reports" 2 06, "Quality Audit and 
Reliability Training Schedule" 208, "Supplier Quality 
Performance" 210, and "Executive Summary Reports" 212. 
These options are further described herein. 

0 By selecting "Audit Schedules" 2 04, a user can perform 

a variety of tasks such as viewing, editing or creating an 
audit schedule. As illustrated in FIG. 3, a user who 
desires to view an audit schedule may do so by selecting 
"All Audits" 302, "Completed" 304, or "Planned" 306, whereby 

5 the quality information network tool retrieves the selected 

schedules for viewing. A user can further tailor the search 
for schedules to view all audit schedules broken down by: 
supplier 308, region 310, quarter by region by commodity 
312, year by quarter 314, product category 316, purpose 318, 

D requester 320, auditor 322, organization 324, and site owner 

326. For example, a user selects "All Audits" 302 by 
product category 316 and is presented with a list of 
commodities as illustrated in submenu 350 of FIG. 3. The 
user then selects a commodity from submenu 3 50 and is 

5 presented with all audit schedules for that chosen commodity 

(not shown) . 

To create a new audit schedule, the user selects a 
commodity from the list on submenu 350, and the schedule 
form 400 of FIG. 4 is presented to the user. The user 
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enters required data into the fields presented such as 
supplier name and address (not shown) , date or quarter 
planned 402, requester information 404, auditor selected to 
perform the audit 4 06, purpose for the audit 408, and any 
5 additional comments 410 as necessary. The quality 

information tool provides drop down items for selected data 
fields to allow for convenient, standardized entries as 
shown generally in form 400. 

Results from completed audits may be viewed by 

10 divisional users of organization 102 by selecting "Audit 

Reports" 206 from main menu 200 of FIG. 2. Audit reports 
provide detailed information concerning the subject audit 
from the auditor 4 06 assigned and listed on schedule form 
400. These reports are condensed in summary form by the 

15 quality information network tool and stored in executive 

summary database 12 9 for easy access and viewing by managing 
executives of organization 102. In this manner, all desired 
levels of management are able to keep apprised of audit - 
related activities and supplier performance. Having this 

2 0 information enables management to make instant business 

decisions . 

Specific audit data is extracted from these audit 
reports and stored in supplier quality performance database 
12 8 by the quality information network tool for rating 
25 purposes. Supplier quality performance database 128 

contains performance indicators for audited suppliers 
measured by business rules adopted by organization 102 in 
order to compare and rate various suppliers. This 
information allows organization 102 to spot performance 
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trends among suppliers audited such as areas of strength or 
weakness, specific technology capabilities, as well as other 
performance factors. It also creates a historical view of 
all audits performed so that organization 102 can quickly 
5 determine when or whether a supplier should be scheduled for 

an audit . 

Reference database 122 contains technical information 
such as audit specifications, industry quality standards, as 
well as standardized reporting forms for selection by an 

10 auditor of organization 102. A divisional user of 

organization 102, such as an auditor, may need to know what 
the minimum industrial standards are for a certain product 
or component in order to verify whether a supplier is in 
conformance with those standards. An auditor may also want 

15 to access reference database 122 to ensure that the quality 

information sought via the scheduled audit is in conformance 
with organization's 102 audit specifications. Also 
included in reference database 122 is an updatable training 
section for auditing divisional users who want to improve 

20 their auditing skills. This section provides a list of 

auditing classes, seminars, and job resources available to 
interested parties of organization 102. In this manner, the 
auditing branch of organization 102 is kept apprised of new 
government regulations concerning industry standards, as 

25 well as auditing techniques and procedures. 

FIG. 5 illustrates a sample process flow for the 
quality information network tool describing how a divisional 
user of organization 102 who is considering scheduling an 
audit proceeds via the tool , A requester at one of 
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workstations 114 or remote workstation 170 logs on to the 
quality information network tool at step 502, The main menu 
screen 200 illustrated in FIG. 2 appears at step 504. In 
order to assess whether an audit is necessary for a given 
5 supplier, the requester first selects the supplier quality 

performance option 210 of FIG. 2 at step 506. The quality 
information tool retrieves selected information pertaining 
to that supplier from supplier quality performance database 
12 8 and delivers it to the user. The user then reviews the 

10 supplier record which contains a history of audits and 

reporting documents pertaining to that supplier at step 508. 
From this information, the requester assesses whether an 
audit is required. For example, organization 102 has a 
policy to audit a particular class of suppliers on a semi- 

15 annual basis before renewing contracts for work. The 

supplier record stored in database 12 8 reveals that an audit 
has not been performed for ten months. In this case, the 
requester would need to schedule an audit. If the requester 
determines that an audit is not required, the process ends 

20 at step 510. Otherwise, flow proceeds to step 512 where the 

requester selects ''Audit Schedules" 204 from main menu 200. 
The data required as illustrated in FIG. 4 is entered at 
step 514. The requester can select who this information 
will be distributed to at step 515 or the quality 

25 information tool may automatically designate a distribution 

list according to business rules defined by organization 
102. The requester selects an auditor to perform the audit 
at step 518. This can be accomplished via a drop down tool 
as illustrated generally in FIG. 4 in auditor field 406. 
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The quality information network provides a list of auditors 
which may be categorized by specialty, skills, and/or 
geographic location. The tool may also be configured to 
pre-qualify an auditor for the requester based upon 
5 information provided such as audit site location, commodity, 

etc. Further, the quality information network tool 
automatically generates an e-mail to the auditor selected 
with selected information and requesting confirmation of the 
audit at step 520. If the auditor responds negatively, flow 

10 reverts back to step 518 whereby the requester must select 

another auditor. Once positive confirmation is received, 
the audit schedule is stored in audit schedules database 124 
awaiting execution. Once the audit is completed, the 
auditor records the information via the quality information 

15 tool and attaches the results to the audit schedule at step 

522. The quality information network tool generates an 
audit report, stores the report in the audit reports 
database 126, and automatically sends an e-mail at step 524 
to the distribution list described above. The quality 

20 information network tool creates a summarized version of the 

report at step 52 6 and stores it in the executive summary 
database 129. A supplier quality performance report is 
generated by the tool at step 528 and stored in the supplier 
quality performance database 128. The results can be sent 

25 electronically to the supplier or subject of the audit at 

system 15 0 and the supplier may respond accordingly at step 
53 0. The response may include comments or corrective 
actions planned or taken by the supplier. The process then 
ends at step 532 . 
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The quality information network tool is a 
comprehensive, centralized, electronic repository for 
supplier audit data for use by development, procurement and 
manufacturing organizations to manage the supplier audit 

5 process. It is a workgroup collaboration tool that allows 

for the sharing of technical supplier audit data that is 
both internal to the organization across multiple divisions 
and locations, and directly with the supplier being audited. 
Benefits include streamlined communication with suppliers 

0 and the elimination of redundant activities. The quality 

information network tool provides a worldwide tool for 
gathering and communicating objective information about 
supplier quality performance and audit activity. Addition 
communication features include automatic e-mails to 

5 customizable distribution lists when audit records are 

created and completed, as well as supplier access to audit 
data. 

As described above, the present invention can be 
embodied in the form of computer- implemented processes and 

) apparatuses for practicing those processes. The present 

invention can also be embodied in the form of computer 
program code containing instructions embodied in tangible 
media, such as floppy diskettes, CD-ROMs, hard drives, or 
any other computer- readable storage medium, wherein, when 

5 the computer program code is loaded into and executed by a 

computer, the computer becomes an apparatus for practicing 
the invention. The present invention can also be embodied 
in the form of computer program code, for example, whether 
stored in a storage medium, loaded into and/or executed by a 

YOR920000563US 1 /I27-0002 1 5 



computer, or transmitted over some transmission medium, such 
as over electrical wiring or cabling, through fiber optics, 
or via electromagnetic radiation wherein, when the computer 
program code is loaded into and executed by a computer, the 
computer becomes an apparatus for practicing the invention. 
When implemented on a general -purpose microprocessor, the 
computer program code segments configure the microprocessor 
to create specific logic circuits. 

While preferred embodiments have been shown and 
described, various modifications and substitutions may be 
made thereto without departing from the spirit and scope of 
the invention. Accordingly, it is to be understood that the 
present invention has been described by way of illustration 
and not limitation. 
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